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Abstract 

A  watermark  is  a  perceptually  unobstructive 
mark  embedded  in  an  image,  audio  or  video  clip 
or  other  multimedia  asset.  A  watermark  can 
carry  additional  information,  for  instance  about 
the  source  and  copyright  status  of  a  document  or 
its  intended  recipient,  its  rights  and  restrictions. 
We  analyse  the  reliability  of  detecting  such  wa¬ 
termarks,  modeling  it  as  a  detection  problem 
where  the  original  content  acts  as  noise  or  inter¬ 
ference.  Probabilities  of  incorrect  detections  are 
expressed  in  terms  of  the  watermark-to-image 
power  ratio,  showing  a  significant  similarity  in 
the  problem  of  detecting  watermarks  and  that 
of  receiving  weak  spread-spectrum  signals  over 
a  radio  channel  with  strong  interference.  Theo¬ 
retical  results  are  verified  by  experiments. 


I  Background 

Electronic  watermarking  is  a  new  research  area, 
combining  aspects  of  digital  signal  processing, 
cryptography,  statistical  communication  theory 
and  human  perception.  It  aims  at  embedding 
additional  data  into  clear  content  (images,  audio 
etc)  in  a  way  that  is  difficult  to  remove  [1-13]. 
Principal  applications  of  electronic  watermarks 
are  in  copyright  enforcement,  automatic  meter¬ 
ing  and  monitoring  of  asset  usage  in  multi-media 
applications,  piracy  tracing,  and  in  providing 
additional  information,  such  as  image  captions. 
New  multi-media  networks  and  services  facili¬ 
tate  the  distribution  of  content,  but  at  the  same 
time  make  copying  and  copyright  piracy  simple. 
Here  we  see  a  clear  need  to  embed  copyright 
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data,  such  as  the  ownership  or  the  identity  of 
the  authorized  user  in  an  indelible  way.  Typical 
requirements  for  watermarking  and  fingerprint¬ 
ing  methods  include: 

1.  Erasing  the  watermark  should  be  techni¬ 
cally  difficult.  Methods  should  be  robust 
against  attackers  knowing  the  watermark¬ 
ing  algorithm  but  not  the  key. 

2.  Replacing  the  watermark  by  another  water¬ 
mark  should  be  a  difficult  task. 

3.  The  watermarking  scheme  should  be  robust 
to  transmission  and  storage  imperfections 
(such  as  compression,  noise  addition,  for¬ 
mat  conversion,  bit  errors)  signal  process¬ 
ing  artefacts  (noise  reduction,  filtering). 

4.  It  should  be  robust  against  typical  attacks, 
e.g.  described  in  [13]. 

5.  It  should  also  be  robust  against  colluding 
pirates  who  combine  multiple  versions  of 
the  same  content  that  are  stamped  with  dif¬ 
ferent  watermarks. 

6.  The  watermark  should  be  unobstructive, 
and  not  annoying  to  bona-fide  users. 

The  organization  of  the  paper  is  as  follows.  Sec¬ 
tion  I  provides  an  introduction  to  the  problem 
of  watermarking,  its  potential  and  limitations. 
Section  II  introduces  our  model  of  the  image 
and  the  watermark.  It  extends  the  idea  pro¬ 
posed  in  [1]  to  regard  the  original  content  as  in¬ 
terference  during  the  detection  of  a  weak  wanted 
signal  (namely  the  watermark).  Section  III  re¬ 
views  several  proposed  methods  for  watermark¬ 
ing  and  verifies  where  the  model  applies.  Sec¬ 
tion  IV  develops  the  theoretical  performance  of 
a  correlator  detector,  as  typically  proposed  in 
many  recent  papers.  The  model  is  verified  with 
experiments  in  Section  V.  Section  VI  concludes 
this  paper. 


II  Formulation  of  Model 


We  approach  the  problem  of  watermark  detec¬ 
tion  by  assuming  a  stationary  process  p  as  a 
model  for  our  set  of  images.  Given  a  water¬ 
mark  w(n )  we  decide  whether  an  image  is  water¬ 
marked  or  not  by  computing  a  decision  variable 
y  and  comparing  y  to  a  threshold  ythr-  We  will 
derive  expressions  for  the  statistical  properties 
of  y  and  the  reliability  of  detection. 

II.  1  Image  Model 

We  address  an  image  of  size  Ni  by  Ab  pixels 
with  a  total  of  Ar  =  A^Ab  pixels.  The  intensity 
level  of  the  pixel  with  coordinates  n  =  (111,112), 
(0  <  11 1  <  Ad  —  1,  0  <  11 2  <  Ab  —  1)  is  denoted  as 
p(n).  We  denote  e\  =  (1,0)  and  e2  =  (0,1),  so 
n  =  ni&i  +11 26,2-  The  set  of  all  pixel  coordinates 
is  denoted  as  .4,  where 

A  =  {11  :  0  <  n  1  <  N]  —  1,  0  <  n2  <  Ab  —  1}. 

In  color  pictures,  p(n)  is  a  YUV  or  RGB  vector, 
but  for  sake  of  simplicity  we  restrict  our  discus¬ 
sion  to  gray  scale  images,  in  which  p(n)  takes 
on  real  or  integer  values  in  a  certain  interval. 
Whenever  convenient  we  will  represent  p(n)  as 
a  ^-expression  p(z)  defined  by 

P(z)  =  22  p(n)z~n 

neA 

=  P(n)Zini -I"2 

n<£A 

The  recipient  of  an  image  q(n)  sees  an  altered 
(e.g.  watermarked,  filtered,  quantized  or  oth¬ 
erwise  manipulated)  matrix  that  resulted  from 
p(n).  A  watermark  detector  has  to  operate  on 
the  a  posteriori  observation  q(n)  while  having 
knowledge  on  the  a  priori  statistical  behaviour 
of  p(n).  We  model  the  image  as  a  sample  (or 
a  statistical  realization )  of  a  random  matrix  of 
Ni  by  Ab  values.  The  k- tli  moment  of  the  gray 
level  of  each  pixel  is  denoted  as  pu  =  E [pk(n)\. 
For  our  analysis,  we  assume  spatial  stationary, 
thus  pk  is  considered  not  to  depend  on  the  lo¬ 
cation  of  the  pixel.  In  particular,  p\  represents 
the  average  value  or  DC-component  in  the  im¬ 
age  and  p-2  =  E[p2(n)j  represents  the  average 
power  in  a  pixel  and  Ep  =  N p2  is  the  aver¬ 
age  total  energy  in  an  image.  The  variance  is 
a2  =  E[  (p(n)  —  pi)2  ]  =  p-2  —  p\ ■  The  intensity 


(-)  Measured,  (x)  exponential 


Figure  1:  Normalized  Correlation  (Rp( A)  — 
p2)/a 2  versus  horizontal  shift  Ai  expressed  in 
pixels.  Solid  line:  measurement  for  “Teeny  1” 
image.  Crosses:  theoretical  results  for  a  =  0.99. 

levels  of  pixels  n  and  m  =  (mi,  m2)  are  corre¬ 
lated,  with 

E [p(n)p(m)  ]  =  Rp,p(n  -  m). 

The  correlation  only  depends  on  the  difference 
vector  A  =  (Ai,  Ao)  =  (m  —  mi, no  —  mo),  as 
we  assume  that  the  image  has  homogeneous  sta¬ 
tistical  properties  (wide-sense  spatial  stationar- 
ity).  In  order  to  make  calculations  for  our  ex¬ 
amples  tractable,  we  simplify  the  image  model 
assuming  the  first-order  separable  autocorrela¬ 
tion  function  (acf)  [14] 

-rp,p(a)  =  Ai  +^2a|A| 

where  |A|  =  |Ai|  +  |A2|  and  where  a  can  be 
interpreted  as  a  measure  of  the  correlation  be¬ 
tween  adjacent  pixels  in  the  image.  Experiments 
reveal  that  typically  a  ss  0.9 .. .  0.99.  As  il¬ 
lustrated  in  Figure  1,  we  found  a  ss  0.99  for 
the  Teeny  1  image.  For  this  image,  the  sam¬ 
ple  mean  is  pi  =  103  and  the  sample  standard 
deviation  is  about  a  =  53.  We  denote  p(n)  as 
the  non-DC  components  of  the  image,  that  is 
p(n)  =  p(n)  —  pi,  so  Rp  =  (T2q:IaL  Some  of 
the  assumptions  made  here  seem  a  crude  ap¬ 
proximation  of  the  typical  properties  of  images. 
From  experiments  such  as  those  to  be  reported 
in  Section  V,  it  appeared  that  reliability  esti¬ 
mates  based  on  this  crude  model  can  be  rea¬ 
sonably  accurate  for  the  purpose  of  this  evalua¬ 
tion.  These  assumptions,  however,  exclude  cer¬ 
tain  images,  such  as  binary  images  or  computer¬ 
generated  images  with  a  limited  number  of  col¬ 


ors. 


II. 2  Watermark  Model 

To  detect  a  watermark  in  a  suspect  image,  some 
proposed  methods  only  use  the  suspect  image 
and  reference  data  on  the  watermark,  while 
other  methods  also  require  the  availability  and 
use  of  the  original  image.  We  assume  here  that 
p(n)  is  not  available  at  the  detector.  The  wa¬ 
termark  is  represented  by  w{n)  which  takes  on 
real  values  in  all  pixels  n  £  A.  This  watermark 
w(n)  is  added  to  the  original  image.  This  re¬ 
sults  in  the  marked  image  q(n)  =  p(n )  +  w(n). 
This  model  implicitly  assumes  that  no  spatial 
transformation  of  the  image  (resizing,  cropping, 
rotation,  etc.)  is  conducted.  We  aim  at  detect¬ 
ing  whether  a  particular  watermark  is  present 
or  not,  based  on  knowledge  of  w(n). 

In  the  special  case  that  the  watermark  does  not 
depend  on  p(n),  i.e.,  if  w(n)  would  be  identi¬ 
cal  for  any  image  p(n),  we  may  define  signal- 
to-noise  ratios  (watermark  energy-to-pixel  vari¬ 
ance),  and  we  can  apply  theoretical  frameworks 
from  detecting  communication  signals  transmit¬ 
ted  over  noisy  channels.  The  correlation  of  wa¬ 
termark  ir  i  with  w-2  is 

RWl,w2(A)  Y  X!  Wl(n)W^(n  +  A) 

neA 

where  we  assume  for  simplicity  that  n  +  A  wraps 
around  when  it  formally  falls  outside  of  the  set 
A.  Note  that  the  correlation  RWltW2  is  defined 
by  a  spatial  summation  whereas  the  correlation 
RPtP  is  defined  by  the  statistics  of  the  random 
process  p(n).  If  the  image  size  is  large  enough 
(AT1  0,iV2  0)  and  if  the  process  p(n)  is 

assumed  to  be  ergodic  we  are  allowed  to  approx¬ 
imate  the  statistical  autocorrelation  RP,P( A)  by 
a  spatial  autocorrelation 

Rp,p(A )  ~  y  p(n)p(n  +  A)- 

neA 

The  average  energy  in  a  watermark  w  equals 
Ew  =  Rw,w(0)  and  is  denoted  as  Ew. 

The  DC  content  of  the  watermark  w  is  Wq{w)  = 
A  watermark  w  is  DC-free  if 

W0(w)  =  0. 

Some  watermarks  are  generated  by  randomly 
generating  a  +k  or  —k  pixel  value  for  w(n ), 
independently  for  each  pixel  n.  When  this 
process  is  ergodic  and  the  image  size  is  large 
enough  we  may  assume  Rw,w( Aj)  =  Rw,w( Ao) 


for  Ai,  A2  ^  0.  With  this  assumption  it  follows 
that 


Rw,w(  A) 


Ew  if  A  =  0 

jt—[(NWq  —  Ew)  otherwise 

(1) 


By  the  law  of  large  numbers  Wq  decays  with 
The  non-zero  terms  in  the  autocorrelation 
function  are  therefore  of  the  form  ,  /N.  This 
implies  that  for  Ni ,  JV2  large  enough  the  auto¬ 
correlation  function  RW)W  will  approximate  a  S- 
function.  Watermarks  with  this  property  are 
referred  to  as  white  watermarks.  A  watermark 
is  called  purely  white  if  its  autocorrelation  func¬ 
tion  is  exactly  equal  to  a  (5-function.  We  have 
seen  that  purely  white  watermarks  cannot  be 
DC-free. 


As  an  other  example,  we  will  treat  the  case 
that  the  watermark  has  a  low-pass  spatial  spec¬ 
trum.  This  method  has  for  instance  been  ad¬ 
vocated  by  Cox  et  al.  [9].  In  such  situa¬ 
tion,  a  potential  attacker  can  not  easily  remove 
the  watermark  by  low-pass  filtering.  Moreover, 
JPEG  compression  typically  removes  or  distorts 
high-frequency  components.  A  low-pass  wa¬ 
termark  can  be  generated  by  spatially  filter¬ 
ing  a  spatially  white  watermark  w(z).  A  first- 
order  two  dimensional  spatial  smoothing  HR 
filter  Sg(z)  =  [(1  — /J2:f1)(l  — /J.^"1)]  1  com¬ 
putes  ib{z)  =  Sg{z)w(z).  Considering  only  the 
zeroth-order  approximation  of  Rw,w  (i.e.  dis¬ 
carding  the  terms  with  postive  powers  of  -^)  we 
may  put  Rw,w(z)  =  Ew.  Then  Ra,,w(z)  is  com¬ 
puted  as 


Rw,w(z)  =  S(z)S(z  )Rw,w{z )  (2) 

E/JN 

_ tl _ z~n 

(i  -Y)2~  ' 


It  follows  that  w  has  a  first  order  acf  with  cor¬ 
relation  factor  3.  The  average  energy  of  w  is 
given  by 


E,-„  = 


Ew 

(1-3-)2' 


III  Review  of  some  water¬ 
mark  proposals 


Next,  we  will  review  a  few  proposals  for  water¬ 
marking  methods,  and  discuss  how  these  meth- 


ods  relate  to  our  framework.  Many  watermark¬ 
ing  methods  have  been  proposed  in  which  the 
watermark  is  linear  and  independent  of  the  im¬ 
age,  similar  to  our  assumptions.  It  turns  out 
that  methods  by  Bender  et  al.  [3]  [10],  Pitas  et 
al.  [4]j  Cox  et  al.  [9]  all  fit  into  the  framework 
covered  here.  Moreover  their  proposed  detec¬ 
tion  closely  resembles  the  correlator  concept  to 
be  covered  in  the  next  section. 

Bender  et  al.  [3]  [10]  describe  a  watermark¬ 
ing  method  called  ’’Patchwork”.  This  method 
takes  np(np  <  N/ 2)  pairs  of  image  points  in 
a  way  known  to  the  transmitter  and  receiver. 
The  brightness  of  a  pixel  is  increased  by  one 
and  the  brightness  of  the  corresponding  point 
is  decreased  by  one.  That  is,  using  our  nota¬ 
tion  of  Section  II,  w(n)  =  —  1  in  np  points,  it 
equals  1  in  np  points,  and  is  0  in  the  remaining 
N  —  2np  points.  Thus,  the  watermark  is  DC-free 
(Wo  =  0)  and  the  average  energy  in  the  water¬ 
mark  is  Ew  =  2//;,/.\r.  The  authors  use  the  np 
points  to  detect  the  watermark,  but  ignore  all 
other  N  —  2 np  points.  However,  because  of  the 
correlation  in  pixel  values,  these  other  N  —  2 np 
can  be  exploited  in  the  detector,  as  we  will  show 
later.  In  [14],  a  communication-theoretical  eval¬ 
uation  is  presented,  which  use  simular  assump¬ 
tions  as  in  our  Section  II,  however  ignoring  for 
instance  correlation  between  pixel  values. 

Pitas  and  Kaskalis  [4]  describe  a  similar  method 
of  partitioning  the  set  of  pixels  into  three  sub¬ 
sets  of  size  np,np  and  N  —  2 np,  respectively.  As 
a  special  case,  one  can  take  np  =  N/ 2.  The  two 
subsets  of  equal  size  are  used  to  embed  and  de¬ 
tect  the  watermark.  The  brightness  of  the  pixels 
of  one  subset  is  altered  by  adding  a  positive  in¬ 
teger  factor  k ,  which  depends  on  the  image  p(n) 
such  that  the  watermark-to-image  ratio  is  suffi¬ 
ciently  large.  This  method  can  be  captured  in 
our  model.  We  have  E,w  =  k2 /2,  Wo  =  k/2. 

Cox  et  al.  [9]  embed  a  sequence  of  real  numbers 
of  length  np  in  an  Ni  by  Ah  image  by  computing 
the  Ni  by  AC  DCT  and  adding  the  sequence 
to  the  np  highest  DCT  coefficients,  excluding 
the  DC  component.  The  method  is  sensitive 
to  errors  in  determining  the  relative  strength  of 
DCT  components,  so  the  original  is  used  for  this 
purpose  by  both  the  sender  and  the  recipient. 

On  the  other  hand,  Zhao  and  Koch  [8]  [5]  pro¬ 
pose  a  method  that  does  not  lead  itself  well 
to  modelling  by  our  framework.  Their  water¬ 


mark  embeds  a  bitstream  in  the  DCT  domain. 
The  image  is  divided  up  into  8x8  JPEG  blocks. 
In  predefined  8x8  blocks  which  are  known  only 
to  the  sender  and  the  watermark  detector,  the 
DCT  coefficients  are  modified  to  ensure  a  cer¬ 
tain  relative  size.  In  this  scheme  w(n)  substan¬ 
tially  depends  on  p(n),  and  in  a  nonlinear  way. 

IV  Correlator  detector 

Correlator  detectors  are  interesting  to  study,  for 
several  reasons.  They  are  a  mathematical  gen¬ 
eralization  of  the  simple  device  in  which  wa¬ 
termarks  with  w  G  {,0,-fl}  are  detected  by 
computing  the  normalized  sum  of  all  pixel  val¬ 
ues  in  which  the  watermark  is  negative,  i.e., 
s~  =  yEn:«,(,!p-i(l(,i)  and  the  normalized 
sum  of  all  pixel  values  in  which  the  water¬ 
mark  is  positive,  i.e.,  s+  = 

Then,  y  =  s+  —  s_  is  used  as  a  decision  vari¬ 
able,  e.g.  [3]  [10].  Moreover,  correlators  are 
known  to  be  the  optimum  detector  for  particu¬ 
lar  situations,  namely  the  Linear  Time-Invariant 
(LTI),  frequency  non-dispersive,  Additive  Gaus¬ 
sian  Noise  (AWGN)  channel,  when  the  receiver 
has  full  knowledge  about  the  alphabet  of  wave¬ 
forms  used  to  transmit  a  message. 

In  a  correlator  detector,  a  decision  variable  y  is 
extracted  from  the  received  image  q(n)  by  cor¬ 
relating  with  a  locally  stored  copy  of  the  water¬ 
mark  w(n).  Therefore  y  =  Rw,q( 0),  with 

Rw,q{ A)  =  w(n)(l(n  +  A)- 

neA 

Figure  2  illustrates  this  correlation  detector. 
The  model  covers  all  detectors  in  which  the  de¬ 
cision  variable  is  a  linear  combination  of  pixel 
luminance  values  in  the  image.  Hence,  it  is  a 
generalization  of  many  detectors  proposed  pre¬ 
viously.  It  covers  a  broader  class  of  watermarks 
then  the  binary  ( w(n )  G  {—k,k})  or  ternary 
( w(n )  G  {— k,0,k})  watermarks.  It  particularly 
includes  methods  in  which  watermark  data  is 
added  to  DCT  coefficients.  For  our  analysis,  we 
separate  y  into  a  deterministic  contribution  yw 
from  the  watermark, 

Vw  =  w(n)w('n) 

neA 

—  Rw,w  (0) 

=  Ew 


Watermark 


Figure  2:  Watermark  Embedder  and  Correla¬ 
tion  Detector 


plus  filtered  noise  from  the  image  yp 

Vp  =  ^  E  w(n)p(n ) 

neA 

=  Rw,P{  0). 

Regarding  yp,  the  mean  value  is  found  as  the 
product  of  the  DC  component  in  the  watermark 
and  the  image,  with 

E [VP]  =  ^E[  E  w(n)p(n) } 

neA 

E[p(n)]  \ ^  ^ 

=  - —  E  w{ll] 

neA 

=  /0  lit)  ■ 

This  result  appears  to  be  irrespective  of  the  cor¬ 
relation  in  pixels.  To  find  the  second  moment, 
we  compute 


E  [y2pl 


B[  (jj  Y  ]  (3) 

V  neA  J 

^2E[  Y  w(n)p(n)w(m)p(m)] 
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neA 

n+AeA 


J 


where  we  have  written  p(n)  =  p(n )  —  p\, 
q(n ,  A)  =  w(n)w(n+ A),  r(n ,  A)  =  p(n)p(n+ A) 
and  r(n)  =  p(n)p(n).  Note  that  for  correlated 
pixels  (a  >  0)  and  spectrally  non- white  water¬ 
marks,  one  has  to  account  for  non-zero  cross 
terms  with  A  /  0.  For  the  remainder  of  this 
paper  we  will  now  assume  that  the  image  is 
sufficiently  large  and  that  the  autocorrelation 
function  RPtP( A)  decays  sufficiently  fast.  This 
allows  us  to  drop  the  restriction  n  +  A  €  A  in 
the  summation  of  Equation  3.  Continuing  the 


computations  from  Equation  3  and  assuming  a 
stationary  and  ergodic  image  source  we  find 

E  [v2p]-tiW$=  (4) 

=  ^fEE^A)E[f(n,A)A 

\  A  neA  J 

=  ^  (££«<»•  *)*«<*)] 

V  A  neA  J 

=  7Y  ]  Rw,w{A)Rp,p{A)^  . 

It  follows  that  the  variance  Od  of  the  decision 
variable  y  due  to  image  noise  is  given  by  the 
expression 

=  jy  'y  '  Rw,w{A)RPtP(A) .  (5) 

A 

In  order  to  have  a  reliable  detection  of  a  water¬ 
mark  it  is  required  that  the  ratio  Ew/od  is  as 
large  as  possible.  We  therefore  define  the  relia¬ 
bility  of  detection  pd  as  the  ratio  Ew/(Jd ■  The 
consequences  of  Equation  5  with  respect  to  pd 
will  be  elaborated  in  the  next  sections. 


IV.  1  Example  1:  White  water¬ 
marks 


The  white  watermark  reasonably  models  most  of 
the  early  proposals  for  increasing  and  decreas¬ 
ing  the  pixel  luminance  according  to  a  pseudo 
random  process.  For  an  absolutely  DC-free  wa¬ 
termark,  Wo(iu)  =  0,  the  decision  variable  y  will 
have  zero  mean. 

For  a  white  binary  watermark  with  embedding 
depth  k,  the  variance  a %  is  computed  as 


°d  = 


Ewa- 
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N  N(N  -  1) 


E«|A| 


A^O 


Ewa2  cr 


N  N(N  -  1) 


1  T  ol 
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where  ,  is  some  constant  dependent  on  the  wa¬ 
termark  generation  process  (see  Section  II. 2). 
We  see  that  the  effect  of  pixel  correlations  is 
significant  only  if  a  is  very  close  to  unity  (little 
luminance  changes)  in  a  small-size  image.  If  the 

image  is  large  enough,  that  is,  if  N  [yzw]  , 


we  may  approximate 


10° 


°d 


Ewa 2 
N 


In  practical  situations,  this  appears  a  reasonable 
approximation.  It  follows  that  pd  is  given  by 


Pd 


a 


(6) 


Note  that  Equation  6  implies  that  the  reliability 
only  depends  on  the  total  energy  of  the  water¬ 
mark  and  not  on  how  this  energy  is  distributed. 


The  value  of  pd  in  Equation  6  will  be  used  in  Sec¬ 
tion  IV. 3  to  obtain  an  expression  for  the  proba¬ 
bility  of  an  incorrect  detection. 


Figure  3:  Watermark  detection  error  rates  Pfa 
and  Pmd  versus  signal-to-noise  ratio  Ew/a'2  for 
correlation  detector.  Experiments  on  Lenna 
(x).  Solid  line:  corresponding  theoretical  curve. 


IV. 2  Example  2:  Low-pass  water¬ 
mark 

We  now  address  a  watermark  with  indepen¬ 
dently  randomly  chosen  pixel  values,  but  which 
is  then  filtered  by  a  two-dimensional  first-order 
filter  Sp(z).  Considering  only  the  zero  order 
terms  and  using  the  results  from  Section  II. 2 
(Equation  2)  we  compute 


present  if  y  —  E[yp]  >  ythr,  the  probability  of 
a  missed  detection  (the  watermark  is  present  in 
q(n),  but  the  detector  thinks  it  is  not)  is 


D  1  (■  (  E,w  Ip  d \ 

p"i=2erfc(vsrJ- 

On  the  other  hand,  given  that  no  watermark  is 
embedded,  a  false  alarm  occurs  with  probability 


A 

Ewa2  [1  +  a 6 1  “ 
N  |_1  -  aid 


This  reduces  to  the  result  of  Section  IV.  1  for 
0  — >  0,  i.e.  for  a  white  watermark.  The  reliabil¬ 
ity  is  given  by 


y/E^Nl-ap 
a  1  +  ajd 


(7) 


Comparing  this  with  Equation  6  we  find  that 
the  use  of  low-pass  watermark  leads  to  a  loss  of 
reliability  for  a  yf  0. 


IV. 3  Error  Rate 


Pfa  =  X  erfc 


f  Uthr  \ 

\\/2<t  d) 


Putting  yti lr  =  Ew/2  provides 


Pmd  —  Pfa 


=  -erfc 


=  -erfc 
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For  the  low-pass  type  of  watermark  of  Sec¬ 
tion  IV. 2  the  error  rate  goes  into 


Pmd 


Pfa 

lerfc 


(  /EwNl-ad\ 

^  V  8a 2  1  +  a/3  J 


Because  of  the  Central  Limit  Theorem,  yp  has  a 
Gaussian  distribution  if  Vq ,  N2  are  sufficiently 
large  and  if  the  contributions  in  the  sums  are 
sufficiently  independent.  The  Gaussian  be¬ 
haviour  will  be  verified  in  Section  V.  If  we  apply 
a  threshold  ythr  to  decide  that  the  watermark  is 


This  result  clearly  shows  that  if  the  watermark 
is  confined  to  low-pass  components  of  the  image, 
this  significantly  affects  the  reliability  of  detec¬ 
tion.  In  this  case  the  random  +/-  terms  in  yp, 
which  are  due  to  multiplying  the  image  p  with 
the  locally  stored  copy  of  the  watermark  w,  do 


not  cancel  as  rapidly  as  these  would  vanish  for  a 
white  watermark.  If  the  watermark  contains  rel¬ 
atively  strong  low-frequency  components  (large 
0) ,  the  variance  of  yp  is  stronger  and  the  error 
rate  is  larger.  If  the  watermark  contains  rela¬ 
tively  strong  high-frequency  components  /3  ~  0, 
the  variance  is  weaker,  so  the  watermark  sees 
less  interference  from  the  image  itself.  However, 
such  a  high-frequency  watermark  is  more  vul¬ 
nerable  to  erasure  by  image  processing,  such  as 
low-pass  filtering  (smoothing). 

V  Computational  and  Ex¬ 
perimental  Results 

In  our  experiments,  we  approximated  white 
watermarks  through  pseudo-random  sequences. 
An  appropriate  choice  appeared  to  be  binary 
watermarks,  w(n)  £  {— k,k}  with  0  =  0  gener¬ 
ated  by  a  2-dimensional  LFSR  maximal  length 
sequence  [16]  [17]  of  length  214  —  1  =  127  *  129. 
Such  sequences  have  a  negligibly  small  DC  com¬ 
ponent  Ei iw(n)  =  —1  and  a  correlation  func¬ 
tion  that  has  the  appropriate  (5-function  shape. 
Repetition  of  the  127  by  129  basic  pattern  leads 
to  a  periodic  correlation  function,  but  maintains 
virtually  zero  correlation  outside  the  peaks. 

Figure  3  compares  the  above  theoretical  results 
with  measurements  of  the  Lenna  and  Teeny  im¬ 
age.  This  Figure  shows  a  good  agreement  be¬ 
tween  theory  and  experiment.  In  order  to  get 
statistical  results  we  simulated  sources  of  images 
by  taking  shifted  and  noisy  versions  of  one  of 
these  prototype  images.  We  computed  the  com¬ 
ponents  of  the  decision  variable  and  estimated 
which  signal-to-noise  ratio  would  be  needed  to 
achieve  reliable  detection. 


VI  Conclusions 

In  this  paper,  we  proposed  a  mathematical 
framework  to  model  electronic  watermarks  em¬ 
bedded  in  digital  images.  The  model  regards 
the  process  of  embedding  and  detecting  a  wa¬ 
termark  to  be  similar  to  that  of  a  communica¬ 
tion  channel.  It  treats  the  original  contents  (the 
image  itself)  as  interference  noise. 

We  observe  that  many  detectors  proposed  for 


watermarks  are  of  the  correlator  type,  though 
often  with  minor  modifications.  Several  essen¬ 
tial  differences  appear  with  the  case  of  trans¬ 
mission  over  a  linear  time-invariant  channel 
with  AWGN.  Our  model  predicts  reliability  per¬ 
formance  (missed  detection  and  false  alarms). 
In  some  special  cases,  particularly  that  of 
a  white  watermark,  the  signal-to-noise  ratio 
(watermark-to-content-energy)  appears  the  only- 
factor  to  influence  the  reliability  of  detection. 
This  leads  to  expressions  for  error  probabilities 
similar  to  those  experienced  in  radio  communi¬ 
cation.  However,  the  spectral  content  of  the  wa¬ 
termark  appears  another  critical  parameter.  If 
the  watermark  is  non- white,  the  spectral  prop¬ 
erties  of  the  images  have  a  significant  influence. 
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